How to enable end-to-end encryption for your iCloud backups

Apple has advanced security features that you can enable to protect more of your data. Among other things, it includes highly secure end-to-end encryption for iCloud backups under the name Advanced Data Protection. This means that essentially only you can access the data stored in your iCloud device backup — Apple doesn’t have the key to access it.

This is a strong layer of security, and although it takes a little bit of work to set up and requires you to take more responsibility for recovering your data, it’s well worth the effort if you’d like to make sure that you’re the only one who can access your backed up information.

Here’s how to set up end-to-end encryption for your iCloud backups on your iPhone. You’ll need to be running iOS 16.2, which was released in December 2022, or later versions.

There are two main things you’ll need to do in order to enable Advanced Data Protection: update all of your Apple devices to the latest version of iOS, iPadOS, macOS, and watchOS (or remove them from your account if they can’t support version 16.2) and set up account recovery. Any HomePods or Apple TVs using your iCloud account also need to be updated to at least version 16.2.

So first, go through all your devices and do a little housekeeping. Once you’ve done that, you need to set up account recovery.

Set up Account Recovery

As a first step, you’ll need to set up Account Recovery since Apple will no longer be able to help recover your data.

• Go to Settings > iCloud > Advanced Data Protection.

• You can tap Account Recovery to set it up or just proceed to Advanced Data Protection; it will walk you through recovery setup as part of the process.

You can also set up a recovery contact and / or a recovery key in the process.

• If you opt for a recovery contact, you’ll see a list of suggested contacts. You can tap the blue plus icon to search your entire contacts list, but be sure to pick someone who has an Apple device and who you’ll be able to contact easily if you’re ever locked out of your account.

• As a next step, you’ll be prompted to send a message to your contact asking them to approve your request. You can send the message with boilerplate text or edit it to your taste. You’ll get a push notification when they accept.

• To use a recovery key, tap that option and be ready to write down or otherwise save the 28-character key it generates so that you can find it if you lose access to your account. You’ll verify the recovery key to finalize setup.